GDPR Policy
1. Introduction
Colour Solutions UPVC Spraying is committed to protecting the privacy, security and integrity of the personal information we collect and process.
We recognise the importance of protecting personal data and process information fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK data protection legislation.
This GDPR Policy explains our approach to collecting, processing, storing, sharing and protecting personal information.
2. Our Commitment to Data Protection
Colour Solutions UPVC Spraying is committed to:
Processing personal information lawfully, fairly and transparently.
Collecting personal information only for specified and legitimate purposes.
Collecting only the information reasonably necessary for those purposes.
Keeping personal information accurate and up to date where appropriate.
Protecting personal information using appropriate technical and organisational measures.
Retaining personal information only for as long as necessary.
Respecting the rights of individuals under UK GDPR.
Reviewing our data protection procedures and security measures regularly.
Taking appropriate action where a personal data breach occurs.
We consider data protection when introducing new systems, technologies and business processes involving personal information.
3. Personal Information We Process
Depending on how you interact with Colour Solutions UPVC Spraying, we may collect and process:
Your name.
Email address.
Telephone number.
Property address.
Postcode.
Details of your enquiry.
Details about your property or project.
Photographs, measurements or documents you choose to provide.
Quotation information.
Appointment and project information.
Customer and transaction records.
Communications between you and our team.
IP address.
Browser type and version.
Device information.
Website usage information.
Information collected through cookies and analytics technologies where applicable.
We only collect information that is reasonably necessary for the purposes described within this policy.
4. How We Collect Personal Information
We may collect personal information when you:
Submit an enquiry through our website.
Request a quotation.
Complete a contact form.
Contact us by telephone or email.
Send photographs or details about your property.
Book spray painting services.
Enter into a contract with us.
Make a payment.
Communicate with us before, during or after a project.
Browse our website.
Accept non-essential cookies.
We may also receive information from suppliers, subcontractors, professional advisers and technology providers where appropriate and lawful.
5. Why We Process Personal Information
Colour Solutions UPVC Spraying processes personal information to:
Respond to enquiries.
Prepare and provide quotations.
Assess potential spray painting projects.
Arrange appointments and site visits.
Confirm bookings.
Provide uPVC spraying and other spray coating services.
Manage ongoing projects.
Communicate with customers.
Process payments and maintain financial records.
Provide customer support and aftercare.
Manage guarantees or warranties where applicable.
Improve our website and services.
Analyse website performance.
Protect our Website and systems.
Prevent fraud, spam and misuse.
Maintain appropriate business records.
Comply with legal, accounting, tax and regulatory obligations.
We do not sell personal information.
6. Lawful Bases for Processing
Under UK GDPR, we must have a lawful basis before processing personal information.
Depending on the circumstances, Colour Solutions UPVC Spraying may rely on the following lawful bases.
Consent
We may process personal information where you have freely given your consent.
This may apply to certain marketing activities, non-essential cookies and other processing activities requiring consent.
You can withdraw your consent at any time.
Contract
We may process personal information where it is necessary to take steps at your request before entering into a contract or to perform a contract with you.
This includes preparing quotations, arranging bookings and providing spray painting services.
Legitimate Interests
We may process information where doing so is necessary for our legitimate business interests and those interests do not override your rights and freedoms.
Examples may include responding to enquiries, improving our services, protecting our Website, preventing fraud and managing our business operations.
Legal Obligation
We may process or retain personal information where necessary to comply with a legal, regulatory, accounting or tax obligation.
7. Data Minimisation
We follow the principle of data minimisation.
This means we aim to collect only the personal information that is adequate, relevant and necessary for the purpose for which it is required.
We periodically review the information we hold and remove or anonymise information that is no longer reasonably required.
8. Data Sharing
We only share personal information where there is a legitimate reason to do so.
Depending on the circumstances, information may be shared with:
Website hosting providers.
IT and technical support providers.
Email and communications providers.
Cloud storage providers.
Payment processors.
Accounting providers.
Suppliers.
Subcontractors involved in delivering services where necessary.
Website analytics providers.
Professional advisers, including accountants, insurers and legal advisers.
Government departments, regulators, courts or law enforcement agencies where required by law.
Where another organisation processes personal information on our behalf, we expect appropriate data protection and security standards to be maintained.
We only provide the information reasonably necessary for the relevant purpose.
9. Data Security
Colour Solutions UPVC Spraying takes appropriate technical and organisational measures to protect personal information from accidental loss, unauthorised access, misuse, alteration, disclosure or destruction.
Security measures may include:
Secure website hosting.
SSL encryption.
Password-protected systems.
Restricted access to personal information.
Secure electronic storage.
Appropriate access controls.
Software and security updates.
Security monitoring where appropriate.
Secure disposal of information that is no longer required.
Access to personal information should only be provided to individuals who reasonably require it to perform their role.
Although no system can provide absolute security, we regularly review our procedures and take reasonable measures to reduce data protection risks.
10. Data Retention
We retain personal information only for as long as necessary to fulfil the purpose for which it was collected and to meet applicable legal, accounting, tax and regulatory requirements.
Typical retention periods may include:
General enquiries and unsuccessful quotations. Up to 12 months where appropriate.
Customer and project records. Up to 6 years where required for contractual, accounting, tax or legal purposes.
Financial records. For the period required under applicable UK tax and accounting legislation.
Guarantee and warranty records. For the applicable guarantee or warranty period and any additional period reasonably required.
Marketing records. Until consent is withdrawn, you unsubscribe or the information is no longer required.
When personal information is no longer required, it will be securely deleted, anonymised or otherwise disposed of appropriately.
11. Your Data Protection Rights
UK GDPR provides individuals with several rights regarding their personal information.
Depending on the circumstances, you may have the right to:
Request access to personal information we hold about you.
Request correction of inaccurate or incomplete personal information.
Request erasure of personal information where applicable.
Request restriction of processing in certain circumstances.
Object to certain types of processing.
Request the transfer of your personal information where the right to data portability applies.
Withdraw consent where processing relies on your consent.
Lodge a complaint with the Information Commissioner's Office.
These rights are subject to certain legal conditions and exemptions and may not apply in every situation.
We will respond to valid requests without undue delay and within the timescales required by UK data protection legislation.
12. Marketing Communications
Where we send electronic marketing communications, we will do so in accordance with applicable UK data protection and privacy requirements.
Where consent is required, we will obtain it before sending marketing communications.
You can withdraw your consent or unsubscribe from marketing communications at any time.
We do not sell personal information to other businesses for their own marketing purposes.
13. Cookies and Analytics
Our Website may use cookies and similar technologies to provide essential functionality and understand how visitors interact with the Website.
Where required, we will obtain consent before using non-essential analytics, advertising or marketing cookies.
Users can manage their cookie preferences using the cookie controls available on the Website.
Further information about our use of cookies can be found in our Cookie Policy.
14. International Data Transfers
Some service providers may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, Colour Solutions UPVC Spraying will take appropriate measures to protect the information in accordance with UK GDPR.
Where required, we will use recognised safeguards for international data transfers.
15. Personal Data Breaches
We maintain procedures for identifying, investigating and responding to actual or suspected personal data breaches.
Where a breach occurs, we will assess the potential impact on affected individuals and take appropriate steps to contain and address the incident.
Where required by UK GDPR, we will notify the Information Commissioner's Office within the applicable timeframe.
Where a breach is likely to result in a high risk to an individual's rights and freedoms, affected individuals will also be informed where required by law.
16. Data Protection by Design
We consider data protection and privacy when introducing new processes, systems or technologies involving personal information.
Where appropriate, we aim to minimise the amount of personal information collected, restrict access and implement appropriate security controls from the outset.
Where processing could create a high risk to individuals, we will consider whether a Data Protection Impact Assessment is required.
17. Third-Party Service Providers
We take reasonable steps to work with service providers that maintain appropriate standards of data protection and security.
Where a third party processes personal information on our behalf, appropriate contractual arrangements may be used where required by UK GDPR.
Third parties acting as independent data controllers are responsible for their own compliance with applicable data protection legislation.
18. Personal Data Breach Reporting
Anyone working for or on behalf of Colour Solutions UPVC Spraying who becomes aware of a suspected loss, disclosure or misuse of personal information should report the matter promptly so appropriate action can be taken.
Potential breaches will be investigated and documented where required.
19. Complaints
If you have concerns about how Colour Solutions UPVC Spraying processes your personal information, please contact us first so we have the opportunity to investigate and address your concerns.
You also have the right to lodge a complaint with the Information Commissioner's Office if you believe your personal information has been processed unlawfully or your data protection rights have not been respected.
20. Policy Review
We review this GDPR Policy periodically to ensure it remains appropriate for our business activities and compliant with applicable data protection legislation.
We may update this policy following changes to our Website, services, technology, business operations or legal requirements.
The latest version will be published on our Website.
21. Contact Us
If you have questions about this GDPR Policy, wish to exercise your data protection rights or have concerns about how your personal information is processed, please contact Colour Solutions UPVC Spraying using the contact details or enquiry form available on our Website.